Adventure Codex is a tracker for tabletop role-playing games. This policy explains what we collect, why we collect it, and the choices you have. We aim to collect as little as possible.
What we collect
- Email address — only if you choose to sign in. We use it to send sign-in links and to identify your account across devices.
- Account data — characters, parties (“tables”), and game state you create in the app. This is stored on our servers so we can sync it across your devices and with the rest of your party.
- Uploaded content — if you upload a map image, we store the original and the rendered tile pyramid so it can be displayed at multiple zoom levels.
- Device identifier — a randomly-generated ID we store on your device to link a guest session to a future signed-in account.
- Subscription status — if you subscribe, we record that your account is entitled to premium features and the dates of the current billing period.
- Server logs — standard access logs (timestamp, IP, user agent, request path) kept for security and debugging, retained for up to 30 days.
What we don’t collect
- No third-party advertising trackers, pixels, or analytics scripts.
- No card numbers or payment details — payments are processed by Apple, Google, or Stripe; we only see a status and the last four digits of the card on file (via Stripe).
- No location data, contacts, photos, microphone, or other device sensors.
How we use your information
- To provide the app and sync your data across your devices and party members.
- To send transactional email such as sign-in links and account notices.
- To process and manage subscriptions.
- To detect abuse and keep the service working.
We do not sell your personal information, and we do not use it to train AI models.
Who we share data with
To operate the service, we use service providers for hosting and serverless functions, database storage, transactional email delivery, and payment processing.
We disclose data otherwise only when required by law or to protect the rights and safety of users and the service.
Retention
We keep your account data for as long as your account is active. If you delete your account, we delete your characters, tables, and uploaded maps within 30 days. Server logs are retained for up to 30 days. Anonymized aggregate counts (e.g. number of accounts) may be kept indefinitely.
Your choices
- Use as a guest. You can use the app without signing in. Your data stays on your device.
- Export. Email us and we’ll send you a copy of the data tied to your account.
- Delete. Email us to delete your account and associated data, or use the in-app delete actions for individual characters and tables.
- Sign out. Signing out on a device clears the auth token from that device.
Children
Adventure Codex is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has signed up, contact us and we will delete the account.
Security
We use industry-standard practices to protect your data: TLS in transit, encrypted database storage, scoped access tokens, and time-limited sign-in links. No system is perfectly secure, so please use a strong, unique password where applicable and notify us if you suspect your account has been compromised.
Changes
If we make material changes to this policy, we’ll update the effective date above and, where appropriate, notify you in the app or by email.
Contact
Questions, requests, or concerns? Email [email protected].